Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/2DA66DFEBFCB11EC867309B15A40D577.roa
File: 2DA66DFEBFCB11EC867309B15A40D577.roa (raw, json)
Hash identifier: 6x8qiEQKNPZaWAad0NTEfquLFYPTxnXeuxb3GV5K2VI=
Subject key identifier: DD:F1:0E:41:8E:8C:F5:5F:9A:C8:7E:17:39:51:EC:75:FE:7F:C5:D8
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 03EC
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/2DA66DFEBFCB11EC867309B15A40D577.roa
Signing time: Tue 19 Apr 2022 10:26:31 +0000
ROA not before: Tue 19 Apr 2022 10:26:27 +0000
ROA not after: Wed 19 Apr 2023 10:26:27 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1004 (0x3ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Apr 19 10:26:27 2022 GMT
Not After : Apr 19 10:26:27 2023 GMT
Subject: CN=625e8e57-f271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:af:77:38:79:33:2c:6c:53:5c:a1:ff:ea:e8:
ac:04:c0:6b:30:a8:79:9d:cb:89:8b:71:30:e4:a3:
72:17:a6:a9:2a:50:14:4e:31:46:63:7a:43:47:38:
38:09:5d:6a:a2:66:56:70:df:a3:b8:b0:90:d1:2a:
f0:b6:72:20:d4:ff:51:bb:69:57:89:04:4e:94:b7:
b4:9e:9e:38:df:ea:08:06:fb:d8:8d:e3:cc:ff:5a:
53:7b:ab:b9:07:42:31:cd:0d:7e:a1:d1:be:a4:6f:
e0:82:60:81:64:6b:0d:e2:7d:7a:6c:5e:85:61:ea:
d3:c9:c6:08:10:7c:65:d5:1f:af:27:3e:bc:8c:b6:
b6:5a:36:90:9e:c9:a6:4a:8b:8d:6b:19:c5:60:e9:
ce:13:b4:0c:53:40:ee:3c:f3:27:04:a0:17:a6:6d:
7c:df:e3:5b:cb:6e:72:9b:d3:11:60:94:b3:b8:ed:
d6:06:31:47:4f:b3:11:c0:84:a8:b5:79:65:6a:ec:
cc:90:30:b6:1f:11:60:dc:6d:08:99:5d:92:e8:4e:
fb:84:1f:08:aa:48:b4:84:18:3f:1a:75:31:0a:f0:
5c:63:ce:fb:60:47:30:c0:c1:9b:46:d1:57:44:75:
c1:7c:04:cd:19:1e:f7:ae:03:91:37:42:d2:4e:23:
68:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F1:0E:41:8E:8C:F5:5F:9A:C8:7E:17:39:51:EC:75:FE:7F:C5:D8
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/2DA66DFEBFCB11EC867309B15A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
c4:15:2a:0d:be:71:04:93:7e:e4:94:d0:b5:cc:dc:a4:6f:e7:
bb:47:f1:7c:4a:51:a3:56:d1:c7:97:7b:d8:bf:82:74:f3:4b:
53:d1:0c:59:c9:3d:98:e2:dc:52:af:75:09:4b:56:7b:11:05:
e1:e7:b2:a2:f0:76:3b:da:cf:32:dc:86:63:2f:11:74:0a:8b:
e4:3e:ae:bd:c1:f6:bc:e6:d1:7e:5b:8a:4b:83:98:32:21:82:
88:12:c3:8b:1d:77:95:bb:59:f9:30:30:35:75:2f:05:04:fc:
17:d3:85:72:22:f4:c2:e3:f2:fd:42:d6:09:56:d5:ee:c5:25:
e6:5f:49:83:18:27:ea:c0:8b:bd:c8:42:11:a5:d6:68:e8:06:
dc:1c:01:ca:74:2a:8a:d4:9a:ca:2d:18:55:71:cd:d3:44:4e:
3e:3e:62:79:bd:ec:87:cc:a3:fd:b8:19:20:71:f7:a5:27:4a:
43:77:71:7f:15:2d:ba:d3:57:1d:dd:7a:0b:49:9e:29:df:2a:
9b:24:ac:8c:ec:5e:0d:3b:4e:5c:56:06:93:db:d3:87:d6:02:
36:90:6c:90:d4:40:e7:7c:05:f7:88:01:0d:4f:05:1b:1a:7d:
47:fc:b4:63:c5:0d:07:2b:6a:e0:1b:19:b9:41:64:00:f6:c4:
c1:cc:27:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org